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Reply to Office Action of Febraary 6, 2008 

Amendments to the Claims : 

1 . (Previously Presented) A method for authorizing, authenticating and accounting users 
having transparent access to a destination network, wherein the users otherwise have access to a 
home network through home network settings resident on the user's computers, and wherein the 
users can access the destination network without altering the home network settings, comprising: 

receiving at a gateway device a request from a user for access to the destination 

network; 

identifying an attribute associated with the user based upon a packet received by 
the gateway device, wherein the attribute comprises an indication of the location comprising a 
port, circuit ID, VLAN ID or MAC address from which the request was received that is 
determined based on the received packet, wherein the packet is transmitted from the user's 
computer, wherein the user's computer remains configured for accessing the home network, and 
wherein no additional configuration software need be installed on the user's computer to access 
the destination network and any other network; 

accessing a user profile corresponding to the user and stored in a user profile 
database, where the user profile is accessed based upon the attribute associated with the user; and 

determining if the user is entitled to access the destination network based upon 
both the user profile and the indication of the location comprising the port, circuit ID, VLAN ID 
or MAC address from which the request was received. 

2. (Canceled) 

3. (Original) The method of claim 1, ftirther comprising updating the user database 
when a new user accesses the destination network. 

4. (Original) The method of claim 1, further comprising maintaining in the user profile a 
historical log of the user's access to the destination network. 
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5. (Canceled) 

6. (Original) The method of claim 1, wherein receiving at the gateway device a request 
from a user for access comprises the step of receiving an Internet destination address from the 
user. 

7. (Original) The method of claim 1, wherein determining if the user is entitled to access 
the destination network further comprises denying the user access where the user profile 
indicates that the user is denied access. 

8. (Original) The method of claim 1, wherein determining if the user is entitled to access 
the destination network further comprises directing the user to a login page where the user 
profile is not located within the user profile database. 

9. (Previously Presented) A system for authorizing, authenticating and accounting users 
having transparent access to a destination network, wherein the users otherwise have access to a 
home network through home network settings resident on the user's computers, and wherein the 
users can access the destination network without altering the home network settings, comprising: 

a gateway device for receiving a request from a user for access to the destination 
network; 

means for identifying an attribute associated with the user based upon a packet received 
by the gateway device, wherein the attribute comprises an indication of the location comprising a 
port, circuit ID, VLAN ID or MAC address from which the request was received that is 
determined based on the received packet, wherein the packet is transmitted from the user's 
computer, wherein the user's computer is configured for accessing the home network, and 
wherein no additional configuration software need be installed on the user's computer in order 
for the user to access the destination network and any other network; 

a user profile database comprising stored access information and in communication with 
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the gateway device, and wherein access information corresponding to the user is identified by the 
attribute associated with the user, and 

an Authentication, Authorization and Accounting (AAA) server in communication with 
the gateway device and user profile database, where the AAA server determines if user is entitled 
to access the destination network based upon the access information stored within the user 
profile database and based upon the indication of the location comprising the port, circuit ID, 
VLAN ID or MAC address from which the request was received. 

10. (Original) The system of claim 9, wherein the packet received by the gateway device 
include at least one of VLAN ID, a circuit ID, and a MAC address. 

1 1 . (Original) The system of claim 9, wherein the means for identifying comprises an 
access concentrator in communication with the gateway device. 

12. (Original) The system of claim 9, wherein the AAA server is located within the 
gateway device. 

13. (Original) The system of claim 9, wherein the user profile database includes a 
plurality of user profiles, wherein each respective user profile of the plurality of user profiles 
contains access information. 

14. (Original) The system of claim 12, wherein the user profile database is located 
within the AAA server. 

15. (Original) The system of claim 13, wherein each respective user profile contains 
historical data relating to the duration of destination network access for use in determining the 
charges due for the destination network access. 

16. (New) The method of claim 1, further comprising determining authentication 
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requirements for the received packet based on information within the received packet, 

wherein determining if the user is entitled to access the destination network further 
comprises basing the determination also on the determined authentication requirements. 

17. (New) The system of claim 9, wherein the AAA server determines authentication 
requirements for the received packet based on information within the received packet and 
determines if the user is entitled to access the destination network based upon the access 
information stored within the user profile database, the determined authentication requirements 
and the indication of the location. 

18. (New) A method for authorizing, authenticating and accounting users having 
transparent access to a destination network, wherein the users otherwise have access to a home 
network through home network settings resident on the user's computers, and wherein the users 
can access the destination network without altering the home network settings, comprising: 

receiving at a gateway device a request from a user for access to the destination 

network; 

identifying an attribute associated with the user based upon a packet received by 
the gateway device, wherein the attribute comprises an indication of the location comprising a 
port, circuit ID, VLAN ID or MAC address from which the request was received that is 
determined based on the received packet, wherein the packet is transmitted from the user's 
computer, wherein the user's computer remains configured for accessing the home network, and 
wherein no additional configuration software need be installed on the user's computer to access 
the destination network and any other network; 

determining authentication requirements for the received packet based on 
information within the received packet; 

accessing a user profile corresponding to the user and stored in a user profile 
database, where the user profile is accessed based upon the attribute associated with the user; and 

determining if the user is entitled to access the destination network based upon 
each of the user profile, the determined authentication requirements for the received packet and 
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the indication of the location comprising the port, circuit ID, VLAN ID or MAC address from 
which the request was received. 
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